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Connectivity  is:  TASKalfa 

Documents  are  how  information  is  shared.  And  how  business  gets  done.  The  TASKalfa  Color  MFP  Series 
seamlessly  connects  to  virtually  any  network.  Delivering  robust  print,  copy,  scan,  and  fa*  capabilities.  And 
a  wide  range  of  advanced  finishing  options,  from  either  the  user-friendly  touch  screen  control  panel  or  your 
desktop.  Flexibility  to  print  from,  or  scan  to  a  USB  drive  right  at  the  device.  And  a  common  driver  that’s  easy 
to  install  and  even  easier  to  use.  All  backed  by  Kyocera's  award-winning  ultra-reliability,  ensuring  that  the 
TASKalfa  Color  MFP  maximizes  your  company’s  productivity.  Ami  that’s  the  most  important  task  of  all. 

To  fliMI  out  more,  visit  www.kyoceramita.com. 
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AFTER  I  INTERVIEWED  E^rl  Pace  for  a  Q&A 

that  was  posted  on  our  Web  site  last  week,  I  knew 
some  pieces  of  it  would  end  up  on  the  cutting- 
room  floor.  I’d  had  an  hourlong  conversation  with 
the  African-American  IT  pioneer  and  co-founder  of  Black 
Data  Processing  Associates,  and  clearly  not  all  of  it  would 
see  the  light  of  day. 


An  anecdote  that  didn't 
make  the  cut  had  to  do 
with  a  book  Pace  said  he 
was  reading:  The  Black 
White  Divide  in  America 
— Still.  The  book  was 
written  by  Ralph  Gordon, 
a  former  president  of  the 
Philadelphia  chapter  of 
the  BDPA,  and  Marlin 
Foxworth,  a  white  super¬ 
intendent  of  schools  who  is 
an  advocate  for  a  program 
to  improve  the  educational 
performance  of  African- 
Americans  and  other  dis¬ 
advantaged  youth  in  his 
California  school  district. 

“In  the  book,  [Foxworth] 
talks  about  how,  after  one 
of  the  school  board  meet¬ 
ings,  another  white  educa¬ 
tor  walked  up  to  him  and  in 
essence  said.  What  are  you 
doing?  Are  you  trying  to  be¬ 
come  one  of  them?’ "  Pace 
recounted.  “That  kind  of 
pressure  can  keep  in  check 
even  a  person  who  wants 
to  advocate  for  movement. 
Their  peer  pressure  would 
in  essence  be  saying, ‘What 
are  you  trying  to  do?  There 
are  some  white  folks  who 


should  get  that  increase  or 
positioa  Why  are  you  do¬ 
ing  what  you're  doing?’ " 

The  reason  I’m  mention¬ 
ing  that  anecdote  here  is 
to  set  the  context  for  what 
Pace  said  next. 

“I  don’t  want  to  come 
across  as  a  whiner,”  he 
said.  “It  is  a  recognition 
of  these  obstacles  that 
has  driven  BDPA,  and  in 
particular  Earl  Pace,  these 
past  33  or  34  years,  not  just 
an  ‘Oh,  woe  is  me’  kind  of 
position.  You’ve  got  to  real¬ 
ize  what  you  have  to  over¬ 
come  in  order  to  attack  it.” 

Indeed,  no  one  wants  to 
be  perceived  as  a  whiner. 
What’s  troubling  is  that  too 
many  African-Americans 
are  concerned  about  that 
perception,  and  it’s  thwart- 


J  The  white 
U-worker  voice 
we  hear  tends  to 


issue.  The  black 
fT-worker  voice  is 


ing  the  discussion  we  so 
desperately  need  to  have. 

At  this  writing,  17  reader 
comments  have  been  post¬ 
ed  in  response  to  the  Q&A, 
but  only  two  appear  to  have 
been  made  by  African- 
Americans.  In  fact.  I  have 
written  quite  a  bit  about 
this  topic  and  have  received 
quite  a  few  e-mails  and  on¬ 
line  comments  in  response, 
yet  those  responses  only 
rarely  come  from  those 
who  identify  themselves 
as  African-American.  My 
sense  is  that  there’s  a  reluc¬ 
tance  to  discuss  the  race  is¬ 
sue  because  of  that  nagging 
concern  about  being  labeled 


Pm  not  sitting  in  judg¬ 
ment  of  that  reluctance, 
because  I  can’t  say  with 
certainty  what  I  would  do 
in  that  positioa  I’m  not  cer¬ 
tain  how  I  would  respond  if 
I  were  black  and  I  read  the 
comments  from  readers  tell¬ 
ing  Pace  to  “get  over  it"  or 
scoffing  that  people  like  him 
“look  under  every  rock  to 
find  even  the  hint  of  racism 
to  justify  their  existence." 


worker  voice  we  hear  tends 
to  dismiss  the  issue  alto¬ 
gether.  The  black  IT-worker 
voice  is  almost  inaudible. 

I’m  reminded  of  the  ar¬ 
ticle  that  appeared  in  the 
Dec.  1  issue  of  Newsweek 
titled  “What  Michelle 
Means  to  Us.”  The  African- 
American  author,  Allison 
Samuels,  wrote  about  how 
Michelle  Obama  “will  have 
the  chance  to  knock  down 
ugly  stereotypes  about 
black  women,”  including 
that  of  the  “angry  black 
woman." 

“Like  many  African- 
American  women  I  know," 
Samuels  wrote,  “Michelle 
has  had  a  lot  of  practice  at 
the  delicate  tap  dance  of 
getting  along  in  the  main¬ 
stream  white  world.”  While 
professional  women  “walk 
the  line  between  being 
confident  and  seeming  like 
a  bitch,”  Samuels  added, 
“African-American  women 
are  especially  wary  that 
being  called  ‘strong’  is  just 
another  word  for  ‘angry.’  ” 

The  labeling  crosses 
genders,  and  it  lies  at  the 
heart  of  a  problem  that  too 
many  of  us  deny.  It  needs 
to  end  so  the  discussion 
can  begin.  ■ 

Don  Tennant  is  Computer- 
world’s  senior  editor- 
at-large.  You  can  contact 
him  at  don_tennant@ 
computerworid.com  and 
visit  his  blog  at  http:// 
blogs.computerworld.com/ 
tennant 
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RESPONSES  TO: 

Microsoft,  Vista 
And  the  Big  Three 

Dec.  15, 2008 


hardware  and  applications,  Micro¬ 
soft  has  more  in  common  with  Toy¬ 
ota.  It’s  the  old  commercial  UNIX 
deployments  that  were  like  the  U.S. 
car  makers.  They  were  largely  re¬ 
placed  with  Windows. 

■  Submitted  by:  Bilal 

RESPONSE  TO: 

Empowering 

Resources 

Dec.  15, 2008 


the  difference  between  the  words 
“resources”  and  “tools.”  If  you  look 
at  employees  as  just  a  group  of  tools 
to  be  used  and  disposed  of,  then  you 
are  not  thinking  of  them  as  resourc¬ 
es.  And  if  you  truly  think  of  them  as 
resources,  then  you  will  not  dispose 
of  them  lightly. 

■  Submitted  by:  Dave 


lie  companies  to  file  interac¬ 
tive  financial  reports  based 
on  the  Extensible  Business 
Reporting  Language 

Program- 


canceled  its 

BrainShare  2009  confer¬ 
ence.  scheduled  for  March 
in  Salt  Lake  City.  The  com¬ 
pany  said  many  users  were 
"hesitant"  about  attending 
because  of  the  recession. 


Perl,  which  has  since  I 
described  as  "the  Swi 
Army  chain  saw  of  pro 
gramming  languages.' 


proved  a  plan  requiring  pub- 


I  testing.” 
The  pate 


•  M 


Microsoft  Issues 
Emergency  IE  Patch 

MICROSOFT  COUP.  i  technology  officer  at  Qualys 
last  week  issued  Inc.,  suggested  that  users  ap- 
an  emergency  ply  the  patch  immediately, 

patch  to  plug  a  Corporate  users  “should  be 


CUT  COSTS. 
HUG  TREES. 


SYSTEMS  SOFTWARE.  SERVICES  FOR  A  GREENER 
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■  NEWS  ANALYSIS 


Priority  !W 


What  Can  You 
Afford  NOT  to  Do 
On  IT  Security? 

There  may  be  some  security 
projects  you  can  put  off 
oecause  of  the  recession 
—  without  risking  your 
company’s  data  or  reputation. 
_  By  Jaikumar  Vijayan 


outright  budget  reductions, 
at  least  in  the  short  term; 
regulatory  requirements 
and  the  ever-expanding 
list  of  external  and  internal 
threats  make  it  hard  to  de¬ 
vote  less  money  to  security 
efforts.  But  there  is  a  grow¬ 
ing  push  to  curb  or  defer 
spending  increases,  accord¬ 
ing  to  IT  managers  and  se¬ 
curity  analysts. 

“It’s  imperative  to  squeeze 
every  penny  of  value  out  of 
everything  you  do,”  said  Jim 
Kirby,  senior  network  engi¬ 
neer  at  Dataware  Services, 
an  IT  services  firm  in  Sioux 
Falls,  S.D.  This  is  a  good 
time  to  stop  working  on 
“marginal”  projects  and  redi¬ 
rect  resources  to  security  ca- 
abilities  that  are  absolutely 
ecessary,  Kirby  said. 

Matt  Kesner,  chief  tech- 


Even  in  an  economy  gone 
sour,  a  growing  number  of 
government  and  industry 
regulations  impose  secu¬ 
rity  compliance  costs  that 
there  is  simply  no  getting 
away  from.  For  instance, 


states  such  as  Massachusetts, 
Connecticut  and  Nevada  re¬ 
quire  companies  to  use  data 
encryption  tools  and  imple- 


It  is  also  looking  for  oppor¬ 
tunities  to  use  open-source 
alternatives  to  some  of  its 
security  tools. 

One  of  the  few  new  IT 
projects  approved  for  next 


patient  information. 

Meanwhile,  cybercrooks 
are  targeting  companies  with 


—  and  successful  —  attacks. 
For  example,  Symantec  Corp. 
said  in  a  report  last  month 


year  is  a  replacement  of  the  that  at  least  $1.7  billion  wi 
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■  NEWS  ANALYSIS 


Continued  from  page  8 
of  bank  accounts  were  com¬ 
promised  in  the  U.S.  during 
the  12-month  period  that 
started  in  July  2007. 

In  light  of  all  that,  not 
making  cutbacks  in  antivirus 
subscriptions  and  purchases 
of  frontline  security  tools 
such  as  firewalls  and  network 
intrusion-detection  systems 
is  a  no-brainer,  security  man- 

Kirfty  said  investments  in 
outbound-traffic  inspection 
tools  and  controls  for  lock¬ 
ing  down  portable  media 
devices  also  are  worthwhile 
because  of  the  heightened 
risk  of  insider  attacks  at  a 
time  of  increased  layoffs.  In 
addition,  he  thinks  that  cut¬ 
ting  back  on  disaster  recov¬ 
ery  and  business  continuity 
projects  wouldn’t  be  wise. 

Whittling  away  at  risk 
management  and  compli¬ 
ance  oversight  functions  is 
another  bad  idea,  said  the 
chief  privacy  officer  (CPO) 
at  a  large  " 


identified.  “Companies  have 
a  lot  of  vendor-hosted  or 
vendor-provided  education 
programs  —  kind  of,  ‘Here’s 
how  you  do  data  security  if 
you’re  covered  by  H1PAA  or 
by  PCI,’ "  he  said.  According 
to  the  CPO,  the  cost  of  indi¬ 
vidual  programs  can  some¬ 
times  top  $200,000  annually, 
depending  on  the  number  of 
employees  being  trained. 

Marcin  Czabanski,  direc¬ 
tor  of  IT  at  LifeSecure  Insur¬ 
ance  Co.  in  Brighton,  Mich., 
said  companies  should  also 
look  for  ways  to  move  ap¬ 
plications  —  and  their  se¬ 
curity  functions  —  into  the 
computing  clouds  offered  by 
vendors  such  as  Google,  Mi¬ 
crosoft  and  Amazon.com. 

By  doing  so,  Czabanski 


cloud.  The  Henssler  Finan¬ 
cial  Group  in  Kennesaw, 

Ga.,  is  a  user  of  Google's 
Postini  e-mail  security  and 
archiving  services.  Tim 
O’Pry,  Henssler’s  chief 
technology  officer,  said  the 
arrangement  has  enabled 
the  financial  services  firm  to 
offload  to  Google  the  hassle 
and  expense  of  securing  its 
e-mail  system. 

In  addition,  using  the 
hosted  services  has  “dramat¬ 
ically"  reduced  Henssler’s 
e-mail  archiving  costs  while 
making  it  easier  for  employ¬ 
ees  to  search  for  and  retrieve 
old  messages,  O’Pry  said. 


/irginia’s  Arlington  County. 

For  instance,  Google 
arlier  this  year  launched 


Google's  can  also  help  orga¬ 
nizations  lower  the  costs  of 
complying  with  e-discovery 
rules  in  legal  cases,  said 
David  Jordan,  chief  infor¬ 
mation  security  officer  for 


designed  to  help  businesses 
comply  with  e-mail  reten¬ 
tion  regulations  and  speed 
up  the  process  of  retrieving 
messages  in  response  to 
lawsuits  or  other  legal  mat¬ 
ters.  Such  setups  can  also 
help  customers  trim  their 
e-mail  hardware,  software, 
management  and  security 
costs,  Jordan  said. 

Another  possible  cost¬ 
saving  option,  he  noted,  is 
deploying  virtualization  and 
thin-client  technologies  that 
let  employees  access  a  set 
of  centralized  applications. 
Jordan  said  he  thinks  that 
thin-client  architectures 
are  inherently  more  secure 
—  and  thus  less  costly  to 
manage  and  control  —  than 
traditional  client/server 
computing  models. 

Any  cutbacks  should  be 
carefully  weighed,  though. 


analyst  at  Yankee  Group 
Research  Inc.,  said  it's  un¬ 
derstandable  that  compa¬ 
nies  might  want  to  rein  in 
their  security  spending  (see 
related  story,  at  left).  But 


can  live  without  intrusion- 
prevention  tools,  which  are 
more  sophisticated  but  also 
more  expensive  and  harder 
to  manage.  He  added  that 
biometric  security  projects 
can  often  be  postponed. 

Paring  back  on  third- 
party  security  education 
and  training  programs  can 
also  yield  some  extra  dol¬ 
lars  that  can  be  used  for 
other  purposes,  said  the 


toted  that  as  a  financial 
ervices  firm,  Henssler  i 
affected  more  than  any 

so,  there's  little  talk  within 
the  company  about  cutting 
security  spending.  “Your 
most  valuable  nontangible 
asset  is  your  reputation,” 
O'Pry  said.  “You  cant  risk 


ECO  CONSCIOUS. 
CFO  CONSCIOUS, 


■  NEWS  ANALYSIS 


AS  PRESIDENT-ELECT 
Barack  Obama  pre¬ 
pares  to  take  office, 
it’s  unclear  how  his 
administration  will  proceed 
on  the  technology-heavy 
Real  ID  program.  But  what  is 
all  too  clear  is  that  the  three- 
year-old  effort  to  impose 
identification-card  standards 
on  state  governments  re¬ 
mains  mired  in  controversy. 

Obama  has  made  virtually 
no  public  comments  about 
the  initiative,  which  calls  for 
driver's  licenses  and  other 
state-issued  IDs  to  include 
digital  photos  and  be  read¬ 
able  by  scanning  devices. 

In  addition,  the  one  time 
that  the  Senate  considered  a 
Real  ID  funding  issue  dur¬ 
ing  Obama’s  tenure  there,  he 


"I  don't  think  anybody 
in  the  next  administration, 
including  Napolitano,  wants 
to  deal  with  Real  ID,”  said 
Jim  Harper,  director  of  in¬ 
formation  policy  studies  at 
the  Cato  Institute  in  Wash¬ 
ington.  “It's  a  real  stinking 
mess.  Most  likely,  they’ll 
find  the  quietest  way  they 
can  to  get  it  off  their  plates." 

The  Real  ID  Act  was 
signed  into  law  by  Presi¬ 
dent  Bush  in  2005  as  part  of 
the  government's  effort  to 
combat  terrorism.  Other  IT- 
related  provisions  require 
participating  states  to  store 
digital  images  of  IDs  for  up 
to  10  years  and  link  their 


Obama 
Will  Inherit 
A  Real  Mess 
On  Real  ID 

The  effort  to  impose  national 
standards  for  photo  IDs  remains 
a  bone  of  contention  between 
federal  and  state  officials. 

By  Jaikumar  Vijayan 


nd  Security  Secretary  Michael  Chertoff  details  tha  aqtncy's 


one  another. 

But  the  law  has  been 
widely  criticized  by  privacy 
advocates  and  civil  rights 
groups.  Even  a  DHS  advi¬ 
sory  committee  voiced  res¬ 
ervations  about  Real  ID  last 
year,  citing  privacy,  security 
and  logistical  concerns. 

Real  ID  has  also  become  a 
bone  of  contention  between 
the  DHS  and  state  govern¬ 
ments  that  see  it  as  an  at¬ 
tempt  to  force  unwanted 


federal  buildings  and  re¬ 
ceive  federal  benefits. 

The  outpouring  of  pro¬ 
tests  has  prompted  the  DHS 
to  ease  up  on  its  imple¬ 
mentation  deadlines.  For 
instance,  under  the  final 
rules  set  by  the  agency  last 
January,  existing  driver’s 
licenses  will  continue  to  be 
accepted  as  federal  identifi¬ 
cation  until  December  2014. 
And  people  who  are  age  50 
or  above  at  that  time  won’t 
have  to  show  Real  ID  cards 
for  another  three  years. 

Also,  after  initially  setting 
a  deadline  of  last  March  for 


Real  ID  requirements,  the 
DHS  backed  off  of  threats  to 
begin  enforcing  the  rules. 

Harper  said  the  agency 
decided  to  slow  down  and 
pass  the  baton  to  the  next 
administration.  DHS  of- 


standards  down  their 
throats  while  making  them 
pay  for  the  program.  In  ad¬ 
dition  to  Arizona,  states  that 
have  said  they  won’t  partici¬ 
pate  include  Arkansas, 
Idaho,  Maine,  Montana, 
New  Hampshire,  South  Car¬ 
olina  and  Washington. 

There's  no  mandate  that 
states  issue  Real  ID  cards. 
But  eventually,  all  citizens 
will  need  IDs  that  comply 


Input,  a  government  IT  con¬ 
sulting  firm  in  Reston,  Va. 

“This  should  have  been 
put  to  bed  long  ago,”  Dixon 
said,  noting  that  many  states 
are  already  implementing 
new  ID  features  similar  to 
what  Real  ID  requires,  as 
part  of  their  own  efforts  to 
improve  security. 

If  Napolitano  is  confirmed 
as  head  of  the  DHS,  said 
Dixon,  her  experience  as  the 
governor  of  a  state  that  is 
fighting  Real  ID  might  help 
point  the  way  to  a  resolu¬ 
tion.  “Napolitano,”  he  said. 


Dossier 


e-busmess.  This  is 
bigger  opportunity 
than  IT;  it’s  about  b 
ness  models.  I  madi 
that  clear  to  the  bo; 
and  the  chairman,  i 


transformation.”  At  the  time, 
we  had  11  business  units, 
none  of  which  could  connect 
or  communicate  with  each 
other.  So  my  job  initially  was 


could  have  this  connectivity  through¬ 
out  the  Textron  environment.  A  lot  of 
companies  had  already  done  it  by  then. 
Textron  had  not.  It  had  inhibited  our 

Continued  on  page  16 


KenBohlen 

Textron’s  chief  innovation  officer 

talks  about  overseeing  corporate 
transformation,  managing  the  white 
space  and  taking  ‘Gemba’  walks. 
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Maximize  thp  Business 
Benefits  of  SaaS! 

March  31 -April  1,  2009  I  Santa  Clara  Convention  Center  I  Santa  Clara,  CA 


Topics  areas  include: 

-  Cloud  Computing  and  SaaS:  One-in-the-Same  or 
Subtle  Differences? 

-  On-Demand  Business  and  Information  Services: 
Present  and  Future 

-  Essential  Building  Block  Technologies  for  SaaS 

-  How  to  Build  SaaS  Applications  and  Solutions 

-  Best  Practices  in  Optimizing  SaaS 

-  The  Business  Benefits  of  SaaS:  Measuring  TCO 
in  Dollars,  Time  to  Market  and  More 


•  See  and  hear  about  essential  SaaS 
building  block  technologies 


•  Hear  presentations  from  world-class 
IT  executives 


•  Find  the  SaaS  industry  all  in  one  place 


■  THE  GRILL  KEN  BOHLEN 


whole  game  is  still 
about  people. 


Continued  from  page  14 

ability  to  communicate  as  a  company. 

We  also  consolidated  over  180  data 
centers  to  two.  And  we  standardized 


chairman  at  Cessna  [Jack  Pelton]  said 
he  didn't  want  anyone  to  know  about 
h.  It  was  an  innovative  process  that 
wrapped  in  a  new  product. 

But  what  I  found  intriguing  was  that 
it  brought  in  such  an  innovative  process 
that  we  had  [Harvard  Business  School 
professor]  Clay  Christensen  come  in 
and  talk  to  us  about  it.  The  concept  is 
that  you  have  to  be  innovative  on  the 
back  end.  If  you  don’t  manage  that, 
some  upstart  can  outgrow  you  from 
the  bottom  up.  So  we  decided  that  we 
needed  a  new  business  model  for  this. 

How  did  your  background  as  an  FT  leader 
help  prepare  you  for  the  chief  innovation 
officer  role?  IT  is  one  of  the  few  areas 
where  you  have  to  manage  between 
the  department  silos.  The  IT  person  is 
one  of  the  few  who  understands  man¬ 
aging  the  white  space. 

What  are  the  biggest  challenges  you  face 
in  your  role?  When  it's  all  said  and  done, 
the  whole  game  is  still  about  people. 
Some  of  the  biggest  challenges  are  being 
able  to  create  a  vision  that  people  can 
look  toward  with  a  spirit  of  expectation. 
When  we  got  to  thinking  about  how 
to  change  the  holding  company  to  an 
operating  company,  the  CEO  and  I  said 
that  all  of  the  [business  unit]  CIOs  would 


for  Asia.  We  have  international  pur¬ 
chasing  and  sourcing  offices  in  China, 
India,  Poland  and  Mexico. 

In  addition  to  overseeing  engineering  and 
information  systems  for  Textron,  you're 
also  responsible  for  the  company's  inte¬ 
grated  supply  chain  and  its  Lean  Trans¬ 
formation  and  Six  Sigma  efforts.  How  do 
you  balance  your  time?  I  have  no  life.  I 
have  an  office  in  Texas,  in  Detroit,  in 
Providence  —  and  I  live  in  Phoenix.  In 
every  one  of  my  remote  offices,  I  have 
a  change  of  dress,  because  I  don’t  know 
from  one  day  to  the  next  where  I'll  be. 

I  like  to  go  on  these  Gemba  walks  [a 

along  the  shop  floor  where  the  work  is 
done].  It's  so  much  more  effective  if  I  go 
see  something  that's  happening  on  the 
shop  floor  than  to  have  it  described  to 
me.  It  takes  a  lot  of  energy,  but  it's  one 
of  the  most  satisfying  aspects  of  the  job. 

A  growing  number  of  CIOs  have  taken  on 
additional  responsibilities  outside  of  IT, 
such  as  supply  chain  and  logistics.  Are 
there  certain  business  disciplines  you  think 
CIOs  are  well  suited  to  oversee?  Most 
times,  the  reality  is,  it’s  dependent  on 
the  person  and  not  so  much  on  the  job. 
So  I  think  that  for  some  of  those  people 
who  had  a  spirit  of  learning  as  they  were 


ggg  II 


payroll,  finance  and  insurance. 

The  biggest  thing  that  came  out  of  it 
was  the  development  of  a  Web  site  to 
show  the  whereabouts  of  our  executives 
and  [provide]  information  on  demand, 
essentially.  That  got  us  to  look  into  other 

ity  materials  and  online  maintenance 
procurement  for  our  jet  aircraft.  This 
allowed  us  to  grow  into  other  areas  as 
we  got  into  far-reaching  opportunities. 

On  the  engineering  front,  we  very 
rapidly  began  developing 
methods  around  how  we ’ 
sign  and  develop  products. 

What  are  tom*  recant  examples  of  in¬ 
novation  at  Textron?  If  we  think  about 
product  innovation,  we’re  putting 
together  a  new  piston  aircraft  called 
the  SkyCatcher.  It  was  developed  in 
a  traditional  skunk  works  style.  The 


box.  But  as  we  developed  a  proven 
track  record,  people  saw  that  this 
wasn’t  about  changing  reporting  struc¬ 
tures;  it  was  about  creating  the  right 
path  for  the  businesses. 

You  also  oversee  Textron's  Global  Technol¬ 
ogy  Center  in  India.  How  difficult  is  it  to  find 
qualified  IT  professionals  and  engineers  in 
India?  We're  having  tremendous  success 
at  finding  highly  qualified  people  in  all 
of  our  industry  groups.  In  the  Bangalore 


What  other  markets  do  you  draw  froir 
these  types  of  skills?  We've  focused 
Bangalore  as  our  engineering  cente 


Paul  M.  Ingevaldson 


Top  10  Qualities  of 
A  Great  fT  Shop 


NO  TWO  IT  shops  conduct  business  in  the  same 
way:  CIOs  report  to  various  executives,  project 
approval  processes  are  all  over  the  board,  and 
personnel  policies  are  vastly  different.  Unlike 
other  professions,  IT  doesn’t  seem  to  have  a  common  set  of 


basic  principles  across 
companies. 

But  some  best  practices 
have  bubbled  to  the  top. 

If  I  were  anticipating  a 
move  to  a  new  company 
or  evaluating  an  IT  shop 
as  a  consultant,  here  are 
the  most  important  prac¬ 
tices  I’d  be  looking  for: 

1.  The  CIO  reports  to  the 
CEO  or.  *t  least  the  chief 
operating  officer.  This  is 
vital  to  the  success  of  the 
IT  department.  It  gives 
the  CIO  clout  and  en¬ 
sures  IPs  independence. 

2.  There  is  an  IT  steer- 
jng  committee  composed 
of  C-level  executives  from 
the  business  units.  The 
executives  make  their 
decisions  based  on  some 
set  of  priorities  and  cri¬ 
teria  such  as  ROI.  The 
committee  is  necessary 
to  ensure  that  allocation 
decisions  are  made  in 
the  interests  of  the  entire 
company,  not  of  an  indi¬ 
vidual  department. 

3.  Tho  IT  shop  usas 
up-to-date  software  and 


hardware.  It  should  also 
have  reasonable  policies 
for  PC  software  upgrades 
and  other  regular  system 
updates.  In  addition, 
the  company  should  be 
spending  an  appropriate 
percentage  of  corporate 
revenue  on  IT.  This  indi¬ 
cates  the  company’s  level 
of  commitment  to  IT. 

4.  There  is  a  Mgh- 
vMbfflty  system  security 
team.  Since  security  is 
one  of  the  most  vulner¬ 
able  areas  of  IT,  it  must 
be  well  managed. 

5.  There  is  an  ongoing 


■  There  are  some 


ticesIM  be  looking 
for  if  I  were  mov¬ 
ing  to  a  new  com¬ 


pany  or  evi 
an  IT  shop 


Commitment  to  security 
and  disaster  recovery  in¬ 
dicates  the  importance  of 
IT  to  senior  management. 

6.  Thors  is  an  ongoing 


keep  IT  staffers  up  to  dais. 

This  should  include  at¬ 
tendance  at  technology 
conventions  as  well  as 
training  seminars  and  in¬ 
dustry  events.  If  there  is  a 
lack  of  training  and  a  par¬ 
allel  use  of  consultants, 
you  know  that  the  focus 
is  not  on  in-house  staff. 

7.  There  is  rigid  adhar- 


that  is  understood  by  IT  and 
(Knowing  how  IT  works 


IT  more  effectively.)  Any 

of  several  SDLC  plans 
may  be  used,  depending 
on  the  type  of  project, 
but  the  process  of  select¬ 
ing  the  approach  should 
be  documented.  This 
gives  you  some  insight 
into  the  professionalism 
of  the  IT  organization. 


This  is  the  only 
way  to  retain  top  techni¬ 
cal  people  who  have  no 
interest  in  managing 
others. 

9.  IT  produces,  at  mini¬ 
mum,  a  monthly  status  re¬ 
port  that  shows  progress 
on  almaior  IT  projects. 

This  document  should 
be  widely  distributed 
throughout  the  company. 
Its  existence  shows  the 
level  of  interest  of  IT 
within  the  organization. 

W.  rT  sits  at  the  long- 
range  planning  table  and 

ing,  it  is  a  sure  sign  that  IT 
is  looked  at  as  an  imple- 
menter  and  not  an  enabler. 

These  are  the  things 
I  would  look  for  in  a 
top  IT  shop.  I  have  seen 
many  shops  that  follow 
some  of  these  practices, 
but  few  that  follow  all  of 
them. 

If  you  agree  or  disagree 
or  would  like  to  suggest 
other  practices,  please  let 
me  know.  Perhaps  with 
such  a  dialogue,  our  in¬ 
dustry  could  at  last  agree 
on  some  basic  principles 
that  would  be  common 
across  the  majority  of  IT 
shops.  Such  consistency 
would  be  a  big  step  for¬ 
ward  in  the  growth  of  IT 


Paul  M.  Inpwaidaon  retired 
CIO  at  Ace  Hardware 
Carp,  in  2004  after  40  years 
in  the  IT  business.  Contact 
him  at  in gepi@aol.com. 
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years,  I  realized  that  tech¬ 
nology  wasn't  the  problem; 
I  just  had  the  wrong  job,” 
Whitney  says.  He  called  it 
quits  in  the  summer  of 2007 


day's  techies  into  the  arms  er  would  have  qualified  for 
of  nonprofits,  and  today’s  the  job  without  his  overseas 
economy  may  have  the  same  volunteer  experience, 
effect,  healthy  companies  Whitney,  too,  has  been 

have  also  been  supporting  able  to  parlay  his  volunteer 
volunteerism.  experience  into  full-time 


DECEMBER : 


employment  with  an  NGO. 
He's  now  a  technical  pro¬ 
gram  manager  with  the 
Grameen  Foundation,  where 
he's  building  an  open-source 
software  system  in  Tunisia 
to  help  microfinance  institu¬ 
tions  fight  global  poverty. 

INTO  THE  MAINSTREAM 

High-tech  positions  with  a 
social  agenda,  such  as  those 
available  through  NGOs.  are 
becoming  an  increasingly 
mainstream  option  for 
skilled  IT  professionals. 

That  certainly  holds  true 
for  Edward  Granger-Happ. 
Granger-Happ  is  chief  tech¬ 


nology  officer  at  the  non¬ 
profit  organization  Save  the 
Children  and  a  co-founder 
of  NetHope.  a  consortium  of 
22  international  nonprofits 
focused  on  communications 
technology  and  collaboration. 

"Most  of  us  that  are  work¬ 
ing  in  IT  in  nonprofit  orga¬ 
nizations  can  double  our 
income  by  going  elsewhere." 
he  says.  “But  there  comes  a 
point  when  the  next  dollar 
isn't  worth  it." 

In  fact,  corporations  are 
facing  increasing  competi¬ 
tion  from  NGOs  in  the  IT 
talent  market,  particularly 
as  a  labor  shortage  looms. 


In  a  2006  study  by  commu¬ 
nications  agency  Cone  LLC, 
79%  of  the  1.800 13-to-25- 
year-olds  surveyed  said  they 
wanted  to  work  for  a  com¬ 
pany  that  cares  about  how 
it  affects  and  contributes  to 
society.  And  69%  of  survey 
respondents  with  jobs  said 
they  were  aware  of  the  ex¬ 
tent  to  which  their  employ¬ 
ers  were  committed  to  social 
and  environmental  causes. 

Many  large  companies 
have  risen  to  the  challenge 
by  rolling  out  in-house  vol¬ 
unteer  programs  and  grant¬ 
ing  employees'  requests  to 
work  with  organizations 


such  as  Geekcorps.  Leading 
IT  companies,  including  Mi¬ 
crosoft,  Hewlett-Packard  and 
Cisco,  have  loaned  employ¬ 
ees  to  the  popular  nonprofit. 

"Companies  are  starting 
to  realize  that  they  don't  just 
have  a  financial  responsibility 
but  a  social  responsibility  as 
well."  says  Whitney.  “There's 
more  to  being  a  corporation 
than  making  money.” 

Of  course,  corporate  inten¬ 
tions  aren’t  entirely  altruistic. 
A  growing  number  of  com¬ 
panies  now  view  overseas 
volunteer  work  as  an  experi¬ 
ence  that  can  deliver  value  to 
Continued  on  page  2.1 
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Geekcorps  volunteer  Scott  Jenkins  and  his  wife,  Allison,  enjoy  an  egg  salad  sandwich  in  Mali 


Is  your  IT  department 

a  great  p  ace  to  work? 


If  your  IT  department  offers  great 
benefits,  competitive  salaries, 
opportunities  for  training  and 
advancement,  and  access  to 
interesting  projects  —  then 
get  your  company  recognized! 


Computerworld  is  conducting  its 
16th  annual  Best  Places  to  Work  in 
IT  survey,  and  we  need  your  help. 
Our  special  report  will  recognize 
the  100  top  companies  that  offer 
their  IT  staffs  challenging  and 
satisfying  work  environments. 


THE  DEADLINE  FOR 
ALL  NOMINATIONS 
IS  WEDNESDAY, 

DEC.  31, 2008, 

AT5P.M.EST. 

Nominate  a  company  online: 

https://www.computerworld.com/BPnom09H 

For  more  information,  e-mail  bestplaces@computerworld.com. 


Continuedfrom  page  20 
enterprise  IT  teams.  In  fact, 
in  an  April  2008  Deloitte  LLP 
study  of 250  human  resources 
leaders,  91%  of  the  respon¬ 
dents  said  that  they  agreed 
that  skills-based  volunteering 
(which  involves  lending  busi¬ 
ness  knowledge  and  experi¬ 
ence  to  nonprofits)  would  add 
value  to  training  and  develop¬ 
ment  programs  by  fostering 
employees'  leadership  skills. 

Clement  Marcellus  was 
willing  to  take  a  chance  on 
that  proposition.  Marcellus 
is  practice  area  leader  at  IBM 
Global  Business  Services. 


either.  According  to  Andy 
Steinem,  CEO  of  executive 
search  firm  Dahl-Morrow 
International,  volunteering 
may  “show  strength  and  the 
capacity  to  be  flexible,”  but 
“potential  employers  want 
to  know  why  you  were  on 
the  fast  track  and  all  of  a 
sudden  took  yourself  off." 

John  Estes,  vice  president 
of  strategic  alliances  at  staff¬ 
ing  firm  Robert  Half  Tech¬ 
nology,  warns  that  although 
voluhteering  can  enhance  a 


people  to  maintain  them. 

“We  really  encouraged 
Scott  to  volunteer  overseas, 
but  it’s  a  two-way  street. 
These  volunteers  are  also 
bringing  back  a  lot  into 
IBM’s  own  IT  environment,” 
says  Marcellus.  Nearly  70% 
of  IBM’s  IT  projects  involve 
“a  mix  of  talent,  languages 
and  culture,”  he  adds  —  and 
they  can  only  benefit  from 
the  experiences  of  a  well- 
traveled  technology  pro. 

OFF  THE  TRACK 

Temporarily  abandoning 


on  an  IT  professional’s  re¬ 
sume,  but  not  all  employers 
support  the  concept. 

“Sometimes  people  read 
[about  overseas  volunteer 
work]  and  think  it’s  the 
coolest  thing  in  the  world. 


teering  as  a  less  ambitious 
goal,”  says  Jenkins,  now 
an  associate  partner  in  the 


Timing  off  potential  em¬ 
ployers  isn’t  the  only  risk  te¬ 
chies  face  when  they  choose 
to  volunteer  in  developing 
countries.  Temporarily  mov¬ 
ing  from  a  well-oiled,  state- 
of-the  art  IT  environment  to 
a  makeshift  tech  shop  in  rural 
Kenya  can  result  in  culture 
shock.  “In  the  U.S,  we  com¬ 
plain  about  network  speeds 
and  computers  that  don’t 
work.  But  when  you're  work¬ 
ing  in  a  rural  setting  in  Af¬ 
rica,  you're  happy  if  you  have 
electric  power.”  says  Ollis. 

And  then  there’s  the  dif¬ 
ficulty  of  reacclimating  after 
spending  months  abroad. 

“It’s  very  hard  to  travel  to  a 
developing  country  for  any 
length  of  time  and  not  be  af¬ 
fected.  Reverse  culture  shock 
is  very  common,"  says  Muir. 

But  it's  a  danger  that  more 
and  more  techies  are  willing 


ITS  JOB  IS 
TO  SIMPLIFY 
YOURS 

IBM  System  x3500l 
$1,625 


Here's  another  way  you  can  become  more 
productive  IBM  System  x3500  Express 
affordably  manages  your  IT  network  from  one 
location,  identifies  potential  problems  before 
they  happen,  and  keeps  your  downtime  to  a 
minimum  It’s  innovation  made  easy. 


ibm.com/systems/simplifyit 

1  866-872-3902  (menton  6N6AH15A) 


a  MANAGEMENT 


M  One  of  the 
things  we 
didn’t  understand 
when  we  got  into 
virtualization  is  that 
[vendors  are]  not 
ready  for  it. 


figuring  his  department  “had 
a  better  than  50/50  chance  of 
things  going  right.” 

If  an  application  has  a 
problem,  he  can  move  it 


critical  applications,  partic¬ 
ularly  those  used  in  clinical 
care,  will  not  be  moved  into 


ideas.  It's  going  to  be 
hard  to  do  this  in  today's 
troubled  economy,  but  it's 
better  to  be  on  top  of  the 
latest  trends  and  technol- 

aff  ect  your  organization 
than  to  discover  them 


' ;  data  for  the  account-  | 
finance  department 
- '  ticket  sales 


especially  the  super- 
savvy  ones.  You'll  learn 

they  really  want  to  have 


on  YouThbe  and  an  account 
on  Facebook  and  MySpace, 
but  we're  having  a  hard  time 
measuring  the  advertising 
impact  We  don't  have  a  good 


body  else.  “I’ve  talked  with 
other  CIOs  and  marketing 
people,  and  they’re  frus¬ 
trated  by  it  right  now  too.” 

Clark's  team  is  chipping 
away  at  the  problem.  He 
says  the  aquarium  can  use 
traditional  tools,  such  as 


“What  are  you  hearing 
out  there  that  I  should 
know?”  can  also  gamer 


of  IT  at  the  Georgia 
Aquarium,  Beach 
Clark  delivers  solid  reports 
on  business  results  to  the 
other  executives  at  the 
Atlanta-based  organization. 

To  that  end,  he  uses  busi¬ 
ness  intelligence  technology 


success  of  the  aquarium  s 
use  of  social  networking 
sites  in  generating  interest 
and  ticket  sales.  “That  was 
kind  of  the  pitfall,"  he  says. 
“We  got  to  where  we  are 
now,  and  we  don’t  know 
how  to  measure  it” 

Clark  says  that  his  IT  staff 
teamed  up  with  the  aquar¬ 
ium's  marketing  depart¬ 
ment  early  last  summer  to 
figure  out  the  best  ways  to 
use  social  networking  sites 


now,  and  ws  don't 
know  how  to  mea¬ 
sure  it. 


such  as  YouTube.  But  as  the  I  OF  IT.  6E0R6IA  AQUARIUM 


Rosen  knew 
organiza- 
orage  needs 
were  growing  at  a  fast  clip.  In 
fact,  the  CIO  at  the  National 
Institute  of  Arthritis  and 
Musculoskeletal  and  Skin 
Diseases  says  he  expected 
30%  to  50%  annual  growth 
in  storage  demand.  But  it 
has  been  closer  to  100%. 

“I  planned  on  it  to  grow 
exponentially,  but  it's  grow¬ 
ing  even  faster  than  ex¬ 
pected,”  he  says,  noting  that 
one  of  the  organization's 
research  groups  recently 
received  a  new  machine 


M  You  have  to 
figure  out 
what  to  do  with  all 
this  data. 

ROBERT  ROSEN.  CIO.  NATIONAL 
INSTITUTE  OF  ARTHRITIS  AND 
MUSCULOSKELETAL  AND  SKIN 
DISEASES 


ties  for  its  parent  company, 
Atlanta-based  Southern  Co. 

“I  didn’t  realize  how  much 
the  employee  population 
would  run  in  their  own  di¬ 
rection  with  this  if  we,  as  an 
IT  organization,  didn’t  move 
quickly  to  fulfill  their  needs." 

Although  she  hadn’t  an¬ 
ticipated  the  issue  when 
she  first  took  the  job,  King 
moved  quickly  to  address 
it.  Rather  than  starting 


directing  employees  rather 
than  trying  to  catch  up  with 
them.  “What  we  really  want 
is  people  who  are  interested 
enough,  savvy  and  want  to 
take  the  time  to  help  us  get 
My  Site  to  the  level  we  want 
it  to  be,”  King  says. 


V  NO  MONEY 

K  Like  many  CIOs, 

I  Rosen  questioned 
"  some  of  the  general 


$10  million- 
plus  budget.  He’s  working 
under  the  assumption  that 
his  upcoming  budget  will 
be  funded  at  least  at  2008 
levels  —  Congress  has  yet  to 


so  Rosen  says  he’s  postpon¬ 
ing  capital  purchases  and 
other  expenses,  even  if  they 
had  been  planned. 

"Things  that  we  thought 
we'd  start  doing,  we’re  put¬ 
ting  on  hold  to  see  how 
things  turn  out,”  he  says. 
“But  when  that  will  happen. 


m  NO  WARNING 

Jl  When  Kathleen 
King  stepped  into 
the  role  of  CIO  at 
Alabama  Power  in  Birming¬ 
ham  a  few  months  ago,  she 
didn’t  anticipate  having  to 
help  employees  with  social 
networking.  But  that's  what 
they  wanted,  she  says.  And 
they  had  good  reasons. 


Ml  didn't  realize 
how  much  the 


with  this  if  we,  as 
an  IT  organization, 
didn’t  move  quickly 
to  fulfill  their  needs. 


their  2009  budgets,  CIOs  And  they’ll  have  to  swap 
generally  expected  modest  multiyear  planning  cycles 
budget  increases  —  averag-  for  quarterly  budgeting, 
ing  2.9%,  says  Shvetank  breaking  up  large  deploy- 


the  IT  practice  at  the  Cor-  can  be  built  in  months,  not 
porate  Executive  Board,  a  years, 
research  organization  in  “What  we’re  discovering 

Washington.  is  that  CIOs  are  often  ill- 

Few  anticipated  that  just  equipped  to  reprioritize  and 
a  few  months  later  they’d  to  do  incremental  rollouts," 
have  to  rethink  everything.  says  Andrew  Horne,  the 


re-evaluating  their  Corporate  Executive  Board. 


2009  budgets,  with  50%  ex¬ 
pecting  cuts  of  10%  or  more. 

“No  one  expected  the 
hammer  to  fall  as  quickly 
and  as  far  as  it  did.  Now  IT 


“But  they  have  no  choice."  ■ 
Pratt  is  a  Computerworld 
contributing  writer  in 
Waltham,  Mass.  Contact  her 
at  marykpratt@verizon.net. 


HARDWARE  ■ 


verted  (“rooted”)  right  out  of 
the  box.  Such  vulnerabilities 
allow  hackers  to  remotely 
gain  complete  control  over 
the  systems. 

Other  key  security  fea¬ 
tures  are  often  absent  on 


form  Modules  because  they 
are  targeted  at  the  consumer 
market,"  says  Rob  Enderle, 
an  analyst  at  Enderle  Group 
in  San  Jose.  “This  means 
they  either  don’t  have  en¬ 
cryption  solutions  or  the  so¬ 
lutions  aren't  that  robust." 

Enderle  also  notes  that 
most  ultraportables  aren’t 
designed  to  be  managed 
centrally  and  therefore  can’t 
have  their  solid-state  drives 
remotely  wiped  clean  of  data 
in  the  event  of  loss  or  theft. 

ULTRA  INVADERS 

The  number  of  ultraporta¬ 
bles  acquired  by  enterprises 
remains  small,  at  least  com¬ 
pared  with  conventional 
laptops,  notes  Wolfe.  Still, 
many  IT  managers  are  dis¬ 
covering  that  some  employ¬ 
ees  are  starting  to  take  their 
machines  into  the  office  and 
along  on  business  trips.  This 
trend  is  raising  security 

Ultraportables’  built-in 
Wi-Fi  and  USB  connectiv¬ 
ity  makes  moving  data  from 
enterprise  systems  onto  the 
machines  relatively  simple, 
says  Christopher  Ciabarra, 
founder  and  president  of 
Los  Angeles-based  security 
software  firm  Network  In¬ 
tercept  LLC. 

Ultraportables’  wireless 
capabilities  also  make  it 
easy  for  them  to  disgorge 
stored  data  to  unauthorized 
parties.  Ciabarra  believes 
that  Wi-Fi  vulnerabilities 
are  a  potentially  big  prob¬ 
lem.  “Everywhere  an  ul- 


exposing  its  data.”  he  says. 
“The  user  often  isn't  even 
aware  this  is  happening." 

To  protect  against  this 
kind  of  exposure,  he  recom¬ 
mends  that  IT  secure  Wi-Fi 
networks  and  enforce  pass¬ 
word  access  to  the  devices. 

Christine  Leja,  CIO  at 
Southwestern  Illinois  Col¬ 
lege  in  Belleville,  I1L,  says  her 
school's  students  are  always 
experimenting  with  new  gad¬ 
gets,  including  ultraportables, 
forcing  her  to  keep  a  step 
ahead  of  potential  threats. 
“Every  year  brings  something 
new,  it  seems,"  she  says. 

Students  don’t  have  access 
to  enterprise  data,  so  the 
biggest  perils  Leja  faces  are 
from  Wi-Fi  intruders  and 
malware,  which  ultraport¬ 
able  users  can  inadvertently 
introduce  into  the  univer¬ 
sity’s  system.  “We  protect 
against  this  by  operating  a 
secure,  closed  network  that 
students  and  employees  have 
to  log  into,”  she  says. 

The  network  is  also  com¬ 
partmentalized  into  virtual 
LANs  that  serve  various 
classroom,  business  and 
general-purpose  applica¬ 
tions,  helping  to  limit  any 
breaches.  Furthermore,  em¬ 
ployees  transmitting  sensi¬ 
tive  data  are  required  to  use 
cellular  3G  networks,  which 


look  like  a  ‘real’  computer, 
so  it  may  lead  to  people  be¬ 
ing  less  protective  of  them,” 


may  be  easier  to  misplace 
than  a  full-scale  laptop.  “Lode 
at  the  number  of  people  who 
leave  their  cell  phones  in 
taxis  and  airport  lounges," 
Vitus  says.  “An  ultraportable 


thieves,  Enderle  says.  “This 
class  of  product  is  particu¬ 
larly  easy  to  steal  because  it 
is  very  easy  to  conceal,”  he 
says.  “It  is  also  very  desir¬ 
able,  which  suggests  it  will 
be  easy  to  sell  as  well.” 

BUILDINO  A  STRATEOY 

Although  ultraportables 
pose  a  variety  of  unique 
security  challenges,  the 
risks  can  be  contained  and 
managed  by  extending  and 
expanding  existing  laptop 
security  practices.  On  the 
wireless  front,  conventional 
Wi-Fi  security  protocols 
and  access  controls  should 
be  adequate  to  deal  with 
threats  to  enterprise  data 
from  ultraportables  and 
other  emerging  wireless- 
enabled  devices,  Vitus  says. 


out  into  the  world 
with  little  or  no 


be  adopted.  Enderle  says  that 
critical  data  should  never  be 
stored  inside  an  ultraport¬ 
able.  Instead,  any  data  should 
be  accessed  from  a  secure 
remote  repository  to  avoid 
the  possibility  of  infecting 
enterprise  systems. 

Another  option  for  pro- 

Enderle  says,  is  to  use  a  se¬ 
cure  flash  drive,  such  as  Iron- 
Key,  that  is  itself  protected 
and  stays  with  the  employee. 
That  way,  if  the  laptop  is  sto¬ 
len,  the  sensitive  data  doesn't 
go  with  it  —  the  data  always 
remains  on  the  secured  flash 

But  the  best  protection  of 
all,  Enderle  notes,  is  preven¬ 
tion.  “Most  [enterprise]  data 
should  not  be  on  a  device  in 
this  class  anyway.”  he  says. 

Employee  education  in 
acceptable-usage  practices 
is  a  must,  regardless  of  the 
IT  security  systems  used, 
Enderle  says. 

Leja  agrees.  “You  have  to 
count  on  continual  security 
awareness,”  she  says.  “Make 
sure  that  [students  or  em¬ 
ployees  are]  being  conscien¬ 
tious,  and  then  use  the  few 
tools  that  do  exist  to  help.” 

The  worst  approach  any 
IT  manager  fan  take  is  to  ig¬ 
nore  the  threat  ultraportables 
pose.  “Even  if  you  haven't 
yet  encountered  any  of  these 
machines,”  Wolfe  says,  “you 
probably  eventually  will”  ■ 

writer  in  Gilbert,  Ariz. 
Contact  him  at  jedwards@ 
gojohnedwards.com. 
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■  SECURITY  MANAGER’S  JOURNAL  MATHIAS  THURMAN 

Massive  Layoff  Is 
A  Security  Issue 

It’s  not  easy  knowing  that  1,000  people  will 
lose  their  jobs.  And  it’s  no  picnic  making 
sure  that  no  IP  is  lost  in  the  process. 


T’S  been  a  rough 
week.  Today,  my  com¬ 
pany  announced  a  15% 


about  1,000  employees. 

Naturally,  I  knew  this 
well  before  today.  Layoffs 
are  never  easy,  and  it  can 
be  agonizing  to  come  into 
contact  with  co-workers 

—  some  of  them  friends 

—  and  say  nothing,  despite 
knowing  that  they  will  lose 
their  jobs  in  a  few  days. 

But  as  the  security  officer, 

I  needed  to  be  privy  to  the 
list  ahead  of  time  because  I 
had  to  take  steps  to  ensure 
continued  security. 

My  first  task  was  to 
identify  any  layoff  candi¬ 
dates  who  respresented 
single  points  of  failure, 
meaning  they  were  the 
only  employees  who  could 
perform  a  particular 
critical  job  function.  Single 
points  of  failure,  human  or 
otherwise,  are  a  bad  idea. 
But  it  happens,  and  it's 
better  to  recognize  them 
in  advance  than  to  realize 
your  mistake  after  they’ve 
left  the  company. 

I  was  also  expected  to 
identify  employees  who 


isn’t  really  something  that 
involves  information  se¬ 
curity,  but  the  “security" 
label  in  my  title  has  drawn 
me  into  some  areas  related 
to  physical  security. 

Finally,  I  had  to  secure 
our  intellectual  property. 
While  some  employees 
were  asked  to  stay  for  one 
to  three  months,  many 
were  told  to  leave  imme¬ 
diately.  Those  employees’ 
accounts  had  to  be  termi¬ 
nated  as  quickly  as  pos¬ 
sible. 

For  example,  many  of 
them  were  service  techni¬ 
cians,  and  we  couldn't  risk 
letting  any  of  them  retain 
access  to  the  network  and 
our  highly  valuable  service 
documentation. 

Ahead  of  the  notifica¬ 
tion,  I  briefed  my  security 
engineers  about  the  pend¬ 
ing  action  and  had  them 
pay  more  attention  than 
usual  to  our  intrusion- 
detection  sensors.  Cur¬ 
rently,  our  sensors  are 
positioned  to  watch  traffic 
running  from  the  Internet 

■  We’ve  done 
this  sort  of  thing 
before,  but  never 
on  this  scale. 


to  our  DMZ  and  the  data 
center.  I  wanted  to  watch 
for  denial-of-service  at¬ 
tacks  and  attempts  to  gain 
unauthorized  access  to 
our  critical  systems.  I  also 
had  some  extra  rules  put 
in  place  for  our  data-leak 
prevention  infrastructure 
to  watch  for  all  PDF  files, 
source  code  and  CAD 
documents  leaving  the 
company,  since  these  three 
file  types  represent  a  large 
portion  of  our  valuable  in¬ 
tellectual  property. 


We’ve  done  this  sort  of 
thing  before,  but  never 
on  this  scale,  and  it  was 
a  challenge  to  terminate 
hundreds  of  accounts  in  a 
very  short  period  of  time 
while  minimizing  the 
number  of  people  who 
would  know  about  the  lay¬ 
offs  in  advance. 

Since  we  don’t  have  a  ro¬ 
bust  identity  management 
tool,  several  interfaces 
must  be  used  to  remove  ac¬ 
cess.  The  most  important 
deactivation  is  the  domain 
account,  since  many  of  our 
critical  business  systems 
are  configured  with  single 
sign-on.  Other  systems, 
such  as  our  SecurelD  serv- 


Trouble 

Ticket 


ers,  BlackBerry  Enterprise 
Servers  and  remote  access, 
couldn't  be  tackled  ahead 
of  time. 

And  because  we  were 
laying  off  some  network 
engineers,  we  had  to  re¬ 
move  access  to  resources 
such  as  routers,  switches 
and  telephony  systems  that 
are  managed  independent¬ 
ly  of  the  single  sign-on  en¬ 
vironment  and  we  had  to 
change  all  administrative 
passwords.  Some  of  this 
was  handled  in  advance  by 
using  scripts  that  kicked  in 
after  the  notification  was 
announced,  but  scripts 
don’t  always  work  as  an¬ 
ticipated. 

Notification  day  is 
drawing  to  a  close,  and 
so  far  we  have  seen  a  few 
sensitive  documents  being 
sent  to  Yahoo  addresses 
—  events  that  I  have  start¬ 
ed  to  investigate.  m 
Otherwise, 
everything  has 
been  quiet,  with 
all  the  scripts 


O  JOIN  IN 


My  next  task  is  to  figure 
out  how  to  do  more  with 
less,  which  I’ll  discuss  in 
my  next  column.  ■ 

This  week’s  journal  is  writ¬ 
ten  by  a  real  security  man- 


DECEMBER : 


But  that  was  then.  Now 
Microsoft  may  fear  Linux 
on  the  desktop  as  much  as 
it  does  the  Mac.  It’s  finally 
taking  Linux  seriously  as 
a  desktop  operating  sys¬ 
tem,  and  it  has  designed 
Windows  7  to  kill  it 

Let  me  explain. 

The  threat  to  Windows 
comes  entirely  from  “net- 
books”  —  lightweight, 
inexpensive  laptops  that 
typically  use  Intel’s  low- 
powered  Atom  processor 
and  don’t  come  with  sub¬ 
stantial  amounts  of  RAM 
or  powerful  graphics 
processors.  They’re  de¬ 
signed  mainly  for  brows¬ 
ing  the  Web,  handling 
e-mail,  writing  memos, 
and  taking  care  of  simple 
word-processing  or 
spreadsheet  chores. 

Netbooks  will  account 
for  about  a  third  of  all 
PC  growth  this  year, 
according  to  Citigroup. 
Shipments  will  rise  at  an 
annual  average  rate  of 
60%  to  reach  29  million 
netbooks  in  2010,  com¬ 
pared  with  18%  growth 
for  standard  notebooks. 


says  a  September  BNP 
Paribas  report. 

Clearly,  the  future  is  in 
netbooks.  And  that  has 
Microsoft  worried.  Net- 
books  can’t  handle  Vista’s 
hardware  demands,  so 
XP  is  the  only  Microsoft 
operating  system  that 
runs  on  them.  But  Linux 
is  ideally  suited  for  lower- 
powered  netbooks. 

The  result?  Acer  and 
Asustek,  which  account 
for  90%  of  the  netbook 
market,  are  using  Linux 
on  about  30%  of  their 
low-cost  notebooks,  ac¬ 
cording  to  Bloomberg. 
Making  matters  worse, 
if  Linux  is  used  on  those 
netbooks,  it  means  that 
Microsoft  Office  isn’t.  So 
Microsoft  takes  a  double 
hit  every  time  someone 
buys  a  Linux  netbook. 

Microsoft  isn’t  just 
worried  about  ceding 
30%  of  the  netbook  mar¬ 
ket  to  Linux.  It’s  also 


■  Microsoft  may 
fear  Linux  on  the 
desktop  as  much  as 
it  does  the  Mac. 


worried  that  if  people  get 
used  to  running  Linux  on 
netbooks,  they'll  consider 
buying  Linux  on  desk¬ 
top  PCs  as  well.  Here’s 
what  Dickie  Chang,  an 
analyst  at  IDC  in  Taipei, 
told  Bloomberg:  “It’s  a 
real  threat  to  Microsoft. 

It  gives  users  a  chance 
to  see  and  try  something 
new,  showing  them  there 
is  an  alternative.” 

Microsoft,  though,  has 
a  not-so-secret  weapon 
against  Linux:  Windows  7. 
Its  new  operating  system, 
slated  to  be  introduced 
sometime  next  year,  is 
designed  to  work  fine 
on  netbooks.  In  fact,  at 
Microsoft’s  recent  Pro¬ 
fessional  Developers 
Conference,  where  the 
pre-beta  of  Windows  7 
was  unveiled,  Windows 
Senior  Vice  President 
Steve  Sinofsky  showed 
off  Windows  7  on  his 
Lenovo  S10  and  said  it 
used  less  than  half  of  the 
netbook’s  1GB  of  RAM. 

When  Windows  7 
ships,  expect  a  massive 
marketing  blitz  pushing  it 


touch-screen  version. 

This  is  anything  but 
a  level  playing  field.  Be¬ 
cause  no  company  owns 
Linux,  there  won’t  be  a 
competing  marketing 
push  for  Linux  netbooks. 
Microsoft  has  shown 
before  how  tough  it 
can  be  on  competitors 
—  remember  Lotus  1-2-3, 
WordPerfect  and  Har¬ 
vard  Graphics?  So  expect 
Linux  netbook  sales  to  fall 
when  Windows  7  ships. 

Despite  Microsoft’s 
killer  instincts,  I  don’t 
think  Linux  netbook  sales 
will  stop  dead.  There 
will  always  be  a  niche  for 
them.  But  within  a  year 
of  the  Windows  7  launch, 
Linux  market  share  will 
drop.  The  high  point  for 
Linux  netbook  sales  will 
be  from  now  until  the 
launch  of  Windows  7. 
After  that  will  come  the 
inevitable  decline.  ■ 
Preston  Oralla  is  a  contrib¬ 
uting  editor  for  Computer- 
world.com  and  the  author 
of  more  than  35  books, 
including  How  the  Inter¬ 
net  Works  (Que,  2006). 
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*  "Bottom  line:  dtSearch  manages  a  terabyte  of  text  in  a 
single  index  and  returns  results  in  less  than  a  second* 
-  InfoWorld 


Search 


Where  Are  the  Jobs? 

MAYBE  M  TEXAS  AND  THE  CAROUNAS 
Bajoumals'  rating  of  100  U.S.  job  markets  placed  four  Texas 
citiei  (and  two  others  in  the  Southwest)  and  four  in  North  and 
South  Carolina  among  the  top  12.  The  worst  market  by  far  was 
Detroit,  which  has  tost  more  than  30400  jobs  over  the  put 
year  and  t25,000  over  the  past  fnm  years.  The  rating  system 
weighted  measures  in  nine  categories,  including  unemploy¬ 
ment  rates  and  job  growth  over  various  time  periods.  IT  jobs 
were  not  singled  out,  however.  Here  are  the  top  12  markets: 


I  ASK  THE  RECRUITERS 


Getting  to  the  Top 


*  *, 


***** 


*.* 


*  * 


How  can  IT  executives  get  on  the 
A-list  for  a  high-profile  job  opening? 
Is  it  bad  form  to  reach  out  to  an 
executive  search  firm? 

Those  are  just  a  couple  of  the 


recruiters  during  a  Q&A  session  at 
the  2008  CIO  Executive  Leadership 
Summit  in  Stamford.  Conn.  The 
recruiters  whofieldedthequestions 
were  Rhona  Kannon,  a  partner  in  the 
IT  practice  at  The  Cambridge  Group 
Ltd.:  Beverly  Lieberman.  president 
of  Halbrecht  Lieberman  Associates 
Inc.:  and  Phil  Schneidermeyer.  a 
partner  at  Heidrick  &  Struggles  Inter- 


bachelor's  degree  program,  she  said. 

Another  factor  is  the  candidate's 
current  or  previous  employers.  "We 
get  to  know  companies  that  are 
known  for  developing  strong  talent." 
said  Schneidermeyer. 

One  thing  he  warned  against  is 
overemphasizing  the  number  of 


had  one  recent  job  candidate  who 
filled  the  back  side  of  his  resume 
with  awards,  and  it  got  me  to  won¬ 
dering  when  the  hell  he  found  the 
time  to  do  his  job,' he  said. 

Another  warning  about  your 
resume:  If  it's  more  than  three  pages 


So.  is  it  a  mistake  to  cold-call  a 
search  firm?  Absolutely  not.  Lieber¬ 
man  said.  But  such  calls  are  tough  for 
recruiters  to  respond  to.  she  noted. 
Instead,  she  recommended  that  IT 


man.  "Most  CEOs  want  to  see  two 
pages."  SSL  it's  important  to  cite 
individual  projects,  financial  savings 
and  other  achievements,  with  short 
paragraphs  describing  each  one. 


asourcethatbothpartiesknowand 
bust  Another  way  to  get  on  a  recruit¬ 
er's  radar  screen  is  to  refer  a  friend  or 
colleague,  said  Schneidermeyer. 

Having  a  pre-existing  relation¬ 
ship  with  a  recruiter  can  be  helpful. 
Lieberman  said,  but  you  shouldn't 
thinksuchrelationshipsgiveyou 
license  to  be  informal.  Never  dress 


It's  critical  for  job  seekers  to  cite 
their  objectives  on  their  resumes, 
said  Kannon.  'No  one  wants  to  read 
through  a  resume  and  try  to  figure  out 
who  you  are."  she  said.  She  advised 
IT  leaders  to  think  about  resumes 
they  have  read  from  IT  job  applicants 
that  have  appealed  to  them. 

The  road  to  the  CIO's  office  used 


casually  for  an  interview,  even  with 
a  recruiter  you  know,  she  advised. 
Also,  don't  use  slang  or  talk  freely 
about  personal  issues. 

As  for  getting  on  the  A-KsL  Lieber¬ 
man  said  applicants  need  some  criti¬ 
cal  qualities,  such  as  affability  and 
strong  communication  skills.  She 
added  that  recruiters  and  employ¬ 
ers  look  to  see  how  job  candidates 
present  themselves  through  their  rb- 


to  nearly  always  start  in  application 
development.  Lieberman  said,  but 
an  increasing  number  of  organiza¬ 
tions  are  bringing  in  executives  from 
outside  of  IT  to  serve  as  CIO.  For 
instance.  Harriet  Edelman.  CIO  at 
Avon  Products  Inc.,  previously  ran 
the  company's  global  supply  chain. 

A  third  path  is  working  for  a  major 
consulting  firm  such  as  McKinsey 
&  Co.,  PricewaterhouseCoopers  or 


a  bachelor's  degree  face  an  uphill 
battle. ‘If  you're  applying  for  a  senior 
rale,  you'd  better  be  enrolled' in  a 


types  of  consultants,  she  noted. 

‘are  highly  regarded  by  CEOs.’ 

-  THOMAS  HOFFMAN 
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Reach  your  target  audience 
of  professional  IT  job  seek¬ 
ers  with  Computerworld’s 
Co-Branded  Email  Blasts. 
This  unique  program  allows 
you  to  choose  your  criteria 
of  100%  opt-in  subscribers 
by  geography,  company 
size,  job  title  and  industry. 

Call  Dawn  Cora  at 
800-762-2977  for  details! 


Are  you 
frequently 
placing  legal  or 
immigration 
advertisements? 

Let  us 
help  you 
put  together 
a  cost  effective 
program  that 
will  make  this 
time-consuming 
task  a  little 


„  V 

SharHank 

high,”  fish  says.  “The  tech 
finally  asked  the  computer 
operator  to  eiplain  everything 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 

Sort  of  Makes  You  ;  fired.1 1  went  to  my  boss  who 

Appreciate  Users  ;  wenttohisboss.andites- 

Ift  the  1980s,  and  this  pilot  I  caiated  up  the  chain  of  com- 
fish  is  the  admin  for  his  com-  1  mand  until  it  was  decided  that 
pany's  large  minicomputer.  j  they  should  leave.  By  then. 

So  when  all  the  terminals  ;  they  were  done  with  their 

suddenly  stop  responding,  ;  project  -  putting  in  a  plywood 

it's  fish's  problem. '1  walked  1  backboard  for  some  telephone 

down  the  hall  to  the  machine  !  equipment  -  and  gone.  It  cost 
room  to  see  what  had  hap-  j  us  a  fortune  to  have  both 

room  every  Friday.  She  said 
she  would  do  the  computer 
backups,  put  everything 
away,  water  the  flower  in  the 
computer  room  and  go  home. 
The  tech  noticed  the  hanging 
flowerpot  was  well  high  and 
away  from  the  hard  drive,  so 
he  didn't  think  that  was  the 
problem  -  until  he  watched 
the  computer  operator  get  a 
water  pot,  put  a  chair  next  to 
the  hard  drive,  stand  on  the 
removable  lid  of  the  hard  drive 

pened,"  says  fish.  “My  eyes  ;  drives  repaired,  and  1  had  to 
bugged  out  when  1  saw  that  ;  rebuild  the  OS.  then  restore 
a  group  of  carpenters  had  1  all  the  data  from  backups, 

somehow  gotten  past  the  1  ruining  my  weekend." 

locked  door  and  had  slid  the 
two  washing-machine-size  ;  Aha! 
disk  drives  apart  and  were  us-  |  Vendor  tech  can’t  figure  out 
ing  them  for  sawhorses  while  !  why  a  hard  drive  on  this  mini¬ 
cutting  wood!  1  walked  in  and  !  computer  fails  every  Friday, 
yelled,  'Get  the  @*S%!  out  of  '  according  to  a  pilot  fish  on 
my  machine  room!' The  lead  ;  the  inside.  “In  those  days,  the 
carpenter  said, ‘Make  me,  !  drives  were  huge,  removable 

and  then  lean  laugh  as  you're  1  300MB  units,  about  three  feet 

and  water  the  flower.  Need¬ 
less  to  say,  the  hard  drive 
crashed  as  soon  as  she  stood 
on  it.  Case  solved." 

How  to  Speak  Sales 

Customer-facing  employee 
buttonholes  this  pilot  hsh. 

User  ‘Just  a  quick  question 
about  the  claim-sorting  fea¬ 
ture.’  Fish:  You  need  to  ask 
Fred;  that's  his  project.  User 
‘No,  1  want  to  know  when 

81  FRANKLY  SPEAKING 


rank  Hayes 

North  Pole  Bailout 


u 


B! 


ILLIONS,”  sighed  Santa,  gazing  forlornly  across 
the  busy  North  Pole  workshop.  “There’s  $700  billion 
for  the  bankers,  $14  billion  for  the  car  companies, 
$50  billion  for  some  guy  named  Ponzi.  How  am  I 
supposed  to  compete  with  giveaways  like  that?” 

“Stop  worrying,  chief,”  said  the  elf  standing  at  his  elbow, 
clipboard  in  hand.  “Remember,  it’s  the  thought  that  counts. 


Which  reminds  me,  have 
you  thought  about  what 
you’re  giving  to  the  IT 
bigwigs?  You  always 
leave  them  until  last.” 

“And  no  wonder,”  said 
Santa.  “What  do  I  give  to, 
say,  Steve  Jobs?  He’s  the 
king  of  Apple  and  biggest 
stockholder  at  Disney.  He 
even  got  to  read  his  own 
obituary  this  year,  when 
Bloomberg  published  it 
by  mistake.  What’s  left?” 

"Maybe  a  ticket  to 
Macworld  in  January?” 
said  the  elf.  “It’s  the  first 
time  in  years  he’ll  have  a 
chance  to  see  the  keynote 
speech,  since  he’s  not  giv¬ 
ing  it.  Bill  Gates  is  always 
a  problem  for  you,  too.” 

“Not  this  year,”  said 
Santa.  “Well  give  him 
some  Seinfeld  DVDs. 
Maybe  thin  he  can  figure 
out  what  Jerry  Seinfeld 
was  babbling  to  him 
in  those  TV  commer¬ 
cials.  What  about  Steve 
Ballmer?  He  really  want¬ 
ed  to  get  Yahoo  this  year. 
Then  he  didn’t.  Then  he 
did.  Then  didn’t." 


“Ballmer  and  Yahoo 
boss  Jerry  Yang  could 
use  some  relationship 
counseling,”  said  the  elf, 
making  a  note  on  his 
clipboard.  “Or  maybe  just 
a  book  by  Dr.  Phil.  How 
about  the  Google  guys?" 

“Poor  Larry  and  Sergey 
and  Eric,”  said  Santa. 
“Google  stock  dropped 
from  $700  to  $300  this 
year.  They  were  billion¬ 
aires,  and  now  they’re 
only . . .  billionaires. 

What  do  you  give  guys 
who  have  their  own 
phone,  their  own  Web 
browser,  their  own  mail 
and  applications. ...” 

“And  their  own  70% 
market  share  in  search?” 


■  Poor  Larry 
and  Sergey  and 
uic.  uooaie  stock 
dropped  from 
$700to  $300  this 
year.  They  were 
billionaires,  and 
now  they’re  only 


said  the  elf.  “Let’s  give 
them  the  list  for  a  scav¬ 
enger  hunt  and  see  if 
they’re  really  any  good 
at  finding  things.  How 
about  Larry  Ellison?” 

“A  sailor  suit,"  said  San¬ 
ta.  “He’s  hoping  to  win 
the  America’s  Cup  again 
next  year.  Besides,  he’s 
already  got  the  best  gift 
any  CEO  could  have  —  a 
president  named  Safra 
Catz.  She’s  the  one  who 
actually  runs  the  show 
and  knits  together  all  of 
Oracle’s  acquisitions.” 

“And  for  her,  knitting 
needles,  right?”  smirked 
the  elf.  Santa  frowned. 
“OK,  we’ll  work  on  that 
one,”  the  elf  continued. 
“What  about  Mark  Hurd, 
the  big  boss  at  Hewlett- 
Packard?” 

“Give  him  the  phone 
numbers  of  Michael  Dell 
and  Scott  McNealy,” 
grumbled  Santa.  “At  the 
rate  things  are  going  at 
Dell  and  Sun,  they’ll  be 
working  for  him  soon.” 

“Aw,  don’t  be  like  that, 
chief,"  said  the  elf.  “How 


about  John  McCain's  cam¬ 
paign  staff?  After  the  elec¬ 
tion,  they  sold  their  used 
BlackBerries  for  $20  each 
at  a  yard  sale.  Turned 
out  the  devices  still  con¬ 
tained  e-mails,  phone 
numbers,  the  works.” 

‘They  can  share  a  copy 
of  BlackBerry  for  Dum¬ 
mies ,"  said  Santa.  “But 
nothing  for  Terry  Childs, 
that  network  admin  in  San 
Francisco  who’s  still  in  jail 
because  he  wouldn’t  give 
anyone  else  the  passwords 
to  the  city’s  network.” 

“What  about  a  punch¬ 
ing  bag?”  asked  the  elf. 
“He  seems  to  have  anger 
management  issues.” 

“What  about  all  the 
other  IT  people  —  the 
ones  who  haven’t  been 
naughty?”  asked  Santa. 
“There  are  still  almost 
4  million  of  them  to  find 
something  for.  It'd  be 
nice  to  give  them  some 
of  those  billions  that  the 
bankers  and  car  makers 
are  getting." 

The  elf  quickly  jotted 
a  calculation  in  the  mar¬ 
gin  of  his  notepad.  “Fifty 
weeks  times  five  days 
times  4  million,”  he  said. 
“How  about  a  billion  days 
of  work  for  IT  shops?” 

“Ho-ho-ho!"  laughed 
Santa.  “Now  that’s  a  gift 
they  can  really  use.”  ■ 
Frank  Hayes  is  Computer- 
world’s  senior  news 
columnist  Contact  him 
at  frank_hayes@ 
computerworld.com. 
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Breakaway  IT  Leadership: 
Competing  on  the  Edge 
of  Innovation 

Attend  Computerworld's  Premier  100  IT  Leaders  Conference, 
the  only  executive  conference  where  you  can  hear  from — and 
network  with— Computerworld's  Premier  100  IT  Leaders  and 
Alumni.  They  are  unique,  award-winning  IT  executives  with 
valuable  lessons  to  share,  advice  you  can  use,  and  peer 
relationships  available  for  you  to  foster.  Here's  what  you  can 
expect  them  to  talk  about  in  conference  sessions: 

•  Investing  Wisely  in  Next-Gen  Strategies  and  Technologies 

•  Advancing  Business  Value  and  a  Greener  Enterprise 

•  Enabling  Smarter,  Faster  Business  Decisions  Via  Web  2.0 

•  Fine-Tuning  the  Global  Architecture  and  Reducing  IT  Costs 

•  Ensuring  Global  Operational  Excellence  24/7 

•  Creating  a  Destination  IT  Workplace:  Lessons  Learned 
from  the  Best  Places  to  Work  in  IT 
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